Page MenuHomePhabricator

HSTS preload for
Closed, ResolvedPublic

Description + are both set up to 301->https and send preload-enabled HSTS headers. However, still returns a 404 (as it's not configured properly on cache_misc), and the HSTS appspot checker doesn't like 4xx/5xx. If I just added it as a domain pointing at the phabricator applayer, it would 5xx, so that's no better (and not really correct anyways).

Perhaps we can synth a 200 OK for this with a short text/plain output, just to satisfy preload requirements?

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change 284112 had a related patch set uploaded (by BBlack):
varnish redir: ->

Change 284112 merged by BBlack:
varnish redir: ->

BBlack claimed this task.

The redirect above worked, this is submitted to the preload list now (will take the usual lag time to make it into browsers)